You didn't read my comment at all. I explicitly said that yes, you need to design and plan for disorderly shutdown, but orderly shutdown is an order of magnitud

You didn't read my comment at all. I explicitly said that yes, you need to design and plan for disorderly shutdown, but orderly shutdown is an order of magnitude more common and you therefore need to also account for that. We don't design products based on guarantees that we don't have, we design for the problem space. FWIW, I work at Google on distributed systems.